Skip to content

Releases: at0m-b0mb/Rosetta-FlipperZero

Rosetta v1.0 — protocol explainer

Choose a tag to compare

@at0m-b0mb at0m-b0mb released this 15 Jul 20:02

Learn the protocol. Then watch it happen.

Rosetta is a protocol explainer for the Flipper Zero. It runs animated, step‑by‑step walkthroughs of how Mifare Classic authentication, OOK/PSK modulation and 1‑Wire actually work on the wire — then drops you into a live capture‑and‑annotate mode that reads real hardware and labels every field against the lesson you just watched.

Rosetta screens

📥 Install (30 seconds)

  1. Download rosetta.fap from the Assets below.
  2. Open qFlipper and connect your Flipper.
  3. Copy rosetta.fap to the SD card at SD Card / apps / Tools /.
  4. On the Flipper: Apps → Tools → Rosetta.

Built against official firmware fw 7 / API 87.1. Also builds clean on the dev SDK — see the green Actions run for this tag.

Prefer to build it yourself?

git clone https://github.com/at0m-b0mb/Rosetta-FlipperZero.git
cd Rosetta-FlipperZero
ufbt launch          # build + install + run on a connected Flipper

🎞️ Walkthroughs (animated)

Protocol Steps
🔐 Mifare Auth RF field & ATQA → anticollision & SAK → auth request → the 3‑pass Crypto1 handshake (cycling through all three legs) → why it's been broken since 2008 (the padlock pops open)
📡 OOK & PSK The carrier → On‑Off KeyingPhase‑Shift Keying → recovering bits from the envelope — drawn as live scrolling waveforms
🧵 1‑Wire One line & parasite power → reset/presence → write slots → read slots → the 64‑bit ROM clocking out — scope‑style timing diagrams with a sweeping playhead

Left / Right / OK move between steps; step pips show where you are; every step has a plain‑English caption.

⚡ Live capture‑and‑annotate

  • NFC — reads a card's anticollision: technology, UID, SAK/ATQA — exactly the exchange that happens before Crypto1. Flags 4‑byte UIDs as trivially cloneable.
  • iButton — issues READ ROM (0x33), splits the 64 bits into family / 48‑bit serial / CRC, and recomputes the Maxim CRC‑8 on‑device to prove the ROM is genuine.
  • Sub‑GHz — a live RSSI envelope scope with an adaptive carrier threshold. Trace above the line = an OOK burst. Frequency selectable: 433.92 / 315 / 868.35 / 915 MHz.

⚙️ App

  • Scene‑based UI: main menu → per‑protocol menu → walkthrough / live capture.
  • Settings for Sound / Vibro / LED feedback and the RF scope frequency.
  • About screen, custom 10×10 icon, GitHub banner + social card + screen mockups.

🔒 Read‑only, always

Rosetta never writes to a tag, never authenticates, never cracks a key, and never transmits. The walkthrough explains the Crypto1 attack; the app doesn't perform it. The RF mode is an RSSI envelope, not a demodulator. Only capture tags, keys and signals you own or are explicitly authorised to test.


Full changelog: CHANGELOG.md · MIT © 2026 at0m-b0mb